Figures as read on 19 October 2026
What drives the time
- Existing systems. Organisations that already run risk assessments, incident reporting and worker consultation have less to build.
- Sites and contractors. More sites and a larger contractor population lengthen the audit and the preparation.
- Risk category. High-risk work such as construction needs more audit time than office-based work.
The cycle after you pass
An accredited certificate lasts three years. Surveillance audits happen at least annually, and a recertification audit closes the cycle. Amtivo says the certificate lasts three years from the start date and that you undergo an annual surveillance audit; TUV Rheinland UK lists annual surveillance and recertification within three years. Budget for the later years, not just the first audit.
What we could not find
No body we reviewed states a typical time to ISO 45001 certification. Citation says the first surveillance audit comes one year after the certificate is issued. LRQA says a revision of ISO 45001 is still in development, so ask any body how a revision would affect a certificate you plan to hold.